Forum Discussion

caiocesarps's avatar
caiocesarps
Copper Contributor
Dec 10, 2020

Dynamic membership rules

Hello, I need to create a dynamic group that contains only active users, and I would like to filter other Azure AD attributes, such as the position for example.
I was not able to proceed even analyzing the documentation.
Does anyone have experience with creating custom dynamic association rules? Is it possible?

Automation & Control
azure
groups
users
  • jimas_1966's avatar
    jimas_1966
    Copper Contributor
    Dec 11, 2020
    Hello,

    It is all explained here : https://docs.microsoft.com/en-us/azure/active-directory/enterprise-users/groups-dynamic-membership

    An example of active users is the below, taken from the link above:
    Properties Allowed values Usage
    accountEnabled true false user.accountEnabled -eq true
    dirSyncEnabled true false user.dirSyncEnabled -eq true


    Keep in mind that this feature requires an Azure AD Premium P1 license for each unique user that is a member of one or more dynamic groups. You don't have to assign licenses to users for them to be members of dynamic groups, but you must have the minimum number of licenses in the Azure AD organization to cover all such users. For example, if you had a total of 1,000 unique users in all dynamic groups in your organization, you would need at least 1,000 licenses for Azure AD Premium P1 to meet the license requirement.